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RELIABILITY  IN  GUIDED  KI3SII£  SYSTEMS 


Introduction 

Modem  warfare  demands  the  Tnost  advanced  weapons  which  science  and 
technology  can  produce.  Yet  the  development  and  performance  of  these  new 
weapons,  with  their  great  complexity,  has  focussed  nation  wide  attention 
on  the  increasingly  critical  and  urgent  problem  of  reliability. 

The  high  rate  of  failure  in  military  electrc.iic  equipment,  due  to  high¬ 
ly  complicated  nature  of  the  problems  involved,  is  particularly  serious.  To 
deal  with  this  problem  the  Research  and  Development  Board  in  the  Department 
of  Defense  established  last  year  an  Ad  Hoc  Group  on  Reliability  of  Electronic 
Equipment,  An  extensive  stirvey  (Ref.  1)  of  the  problem  resulted  in  (1)  a 
progress  report  embodying  far-reaching  conclusions  and  recommendations,  (2)  a 
continuing  RDB  Electronic  Reliability  activity,  and  (3)  a  directive  from  the 
Secretary  of  Defense  to  the  three  Services  stating  that  "Reliability  must  be 
a  prime  objective  in  all  phases  of  the  procurement  and  use  of  electronic  equip¬ 
ment,  beginning  with  the  establishment  of  military  characteristics  and  includ¬ 
ing  operational  training,  maintenance,  organization  and  facilities,  as  well 
the  quality  of  the  equipment". 

In  the  field  of  guided  missiles  the  reliability  problem  is  particularly 
acute.  It  is  acute  partly  because  the  whole  technology  of  missiles  is  new, 
and  also  because  of  the  novel  and  complex  mechanical  and  electronic  devices 
which  must  operate  under  severe  environmental  conditions.  Thus  the  missile 
reliability  problem  includes  the  entire  problem  of  electronic  reliability  in 
an  exaggerated  form.  Reliability  has  been  a  familiar  problem  in  missile  test 
ing  activities  during  the  last  five  years,  and  with  the  recent  acceleration  of 
the  guided  missile  program  it  becomes  Important  to  focus  attention  on  the  prob¬ 
lem  of  reliability  in  order  to  insure  a  successful  national  effort  in  the  field 
of  gviided  iiiiflSileB. 
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The  pujrpose  of  this  paper  is  to  discuss  the  technical  probler,  of  reliabil¬ 
ity  in  ftuideri  ipissile  systems.  / 5  • 

M  Vs 

Statemert  of  the  Problem; 

Let  us  begin  by  stating  tiie  problem.  Guided  missiles  involve  the  use  of 

* 

a  multiplicitj'  of  electrical,  mechanical,  and  electro-r.echanical  devices  under 
very  severe  conditions.  All  of  these  coniponents  must  operate  during  the  time 
the  missile  is  in  the  air.  In  addition,  before  and  during  the  flight  phase  an 
organization  of  men  and  machines  must  also  perform  properly  on  the  ground,  on 
shipboard  or  in  aircraft.  And  finally,  a  complex  man-machine  support  system 
must  function  properly  in  development,  production,  supply,  testing,  and  mainten¬ 
ance,  to  insure  the  desired  operation  of  the  guided  rJLssile  system.  The  problem 
i s  to  achieve  and  maintain  optimum  reliability  in  guided  ndssilo  systems,  includ¬ 
ing  both  men  and  machines. 

Several  terms  in  this  statement  need  emphasis.  First,  the  objective  is  to 
achieve  and  maintain  reliability,  so  that  reliability  is  a  problem  throughout 
the  service  life  of  the  missile,  and  is  not  merely  a  matter  of  "debugging"  the 
bird  and  system  during  its  development.  Second,  "reliability"  means  probability 
of  success;  more  specifically the  reliability  of  a  given  component  or  system  is 
the  probability  that  it  will  perform  its  required  function  under  operational  con 


ditions  for  a  specified  operating  time.  As  an  example  consider  n  rocket  motor. 
One  of  its  performance  parameters  is  the  thrust.  Suppose  *;>at  for  successful 
motor  performance  the  thrust  must  lie  within  certain  limits  for  a  specified  time. 
These  performance  limits,  together  with  the  required  eperatini'.  time,  define  the 
task,  that  is,  the  yierfomance  requirements.  A  motor  whose  thrust  lies  within 
the  task  limits  for  the  required  tiiiie  is  successful;  one  whose  thrust  falls  out¬ 
side  the  limits  during  perfonnsnee  fails. 

The  distribution  of  performances  can  be  establi.'>)\<^d  by  measuritig  the  thrust 


of  a  numiier  of  rotors,  t^ost  of  thi  t'^nst  values  will  I  ■ «  *>,<■  t./ivk  l-;r,l*n. 
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initlqlly.  During  the  operating  time,  however,  some  of  them  will  drift  out¬ 
side  and  the  performance  distribution  function  broadens.  At  the  end  of  the 
operating  period  a  certain  fraction  of  the  motors  will  still  have  thrusts  with¬ 
in  the  task  limits.  This  fraction  is  the  probability  that  a  motor  will  perform 
within  the  task  limits  during  the  operating  period,  and  is  numerically  equal  to 
the  reliability. 

Similar  remarks  hold  for  the  remaining  performance  param.eters  of  the  motor. 
In  general  the  performance  distribution  will  thus  include  all  the  operating  char¬ 
acteristics  necessary  to  determine  the  state  of  the  system  for  tlie  purpose  at 
hand,  and  in  the  same  way  the  task  will  include  all  the  performance  limits,  so 
that  each  performance  param^eter  in  the  performance  distribution  is  matched  by 
perform.ance  limits  in  the  task.  The  reliability  of  the  system  is  then  the 
probability  that  all  the  performance  parameters  lie  within  their  task  limits 
for  the  duration  of  the  operating  period. 

It  is  important  to  note  that  the  reliability  depends  not  only  on  the  spread 
of  the  system  perform.ancas  (which  affected  by  the  environment)  but  also  on 
the  task  and  the  operating  time.  In  general  the  reliability  of  n  system  is  de¬ 
creased  if  the  task  limits  are  narrowed  or  if  the  operating  time  is  increased. 

The  reliability  also  tends  to  be  lowered  if  the  perfonn.'ince  spread  is  broadened, 
either  through  less  quality  control  or  through  increased  environmental  severity. 
For  example,  in  a  guidance  system,  high  temperatures  in  flight  may  broaden  the 
spread  in  electron  tube  performance  far  beyond  that  found  under  laboratory  condi¬ 
tions,  with  a  consequent  decrease  in  guidance  reliability. 

In  the  case  of  missiles  it  is  convenient  to  exclude  from  reliability  those 
failures  caused  hy  direct  enemy  action  and  to  treat  them  separately  under  vulner¬ 
ability. 

Reliability  rviy  be  split  further  into  so-called  aborts  and  "innccurnten". 
Aborts  are  which  renult,  in  drastic,  unueual,  and  ui. ex  nee  bed  perforannera 
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lying  far  outside  the  normal  perfonr.ince  spread.  This  normal  spread  is  then 
considered  under  accuracy,  and  reliability  becomes  the  probability  that  the 
missile  will  not  abort.  This  split  of  reliability  into  accuracy  and  non-abort 
probability  is  useful  in  some  cases  but  is  artificial,  since  many  marginal 
failures  in  the  components  (in  the  guidance,  for  example)  nay  result  in  missile 
aborts.  Thus  system  accuracy  and  reliability  are  interrelated  by  the  marginal 
performance  of  components. 

Why  Is  the  Problem  Difficult? 

Now  let  us  see  why  the  reliability  problem  is  difficult.  Lmproving  re¬ 
liability  is  of  course  part  of  the  development,  production  and  use  of  any  new 
technological  device.  For  relatively  simple  systems  there  ir.  a  definite  period 
of  "debugging”  in  which  the  faults  are  easy  to  detect  and  eliminate,  and  the  re¬ 
liability  problem  is  solved.  In  large  systems,  however,  the  problems  of  finding  , 
and  curing  the  ailments  increase  rapidlj’  vdth  complexity  and  require  a  more  scienti 
fic  approach,  which  I  shall  call  reliability  control  and  r.hall  discuss  briefly 
later  in  the  paper. 

Guided  missiles  are  at  the  forefront  of  modern  science  and  technology  and 
missile  engineering  requires  the  integration  of  new  fields  of  aerodynamics,  pro¬ 
pulsion,  servo-mechanics,  and  electronics.  In  addition,  the  whole  missile  in¬ 
dustry  is  going  through  growing  pains  under , the  impetus  of  the  present  accelerated 
programs.  These  are  all  general  reasons  why  reliability  is  a  problem  in  guided 
missiles,  and  they  are  common  to  other  weapons  as  well. 

In  addition,  there  are  six  technical  factors  which  make  the  reliability  prob¬ 
lem  particularly  serious  in  guided  missiles: 

(1)  Complexity:  The  first  of  these  is  complexity,  f'odern  guided  m.issile 
systems  are  extremely  complex  in  terms  of  both  the  numVior  of  parts  in  the 
structure  and  also  in  terms  of  their  rnany  interactions  in  functions. 
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This  high  degree  of  complexity  tends  to  increase  the  c'n-inces  of  failure. 

Tor  a  missile  with  50  components  in  series,  each  with  a  reliability  of  9' 
percent,  the  overall  reliability  is  only  60  percent.  For  a  system  of  3OO 
such  components  the  probability  of  success  is  only  5  percent!  In  piloted 
aircraft  an ‘abort  rate  of  about  five  percent  is  generally  considered  accept¬ 
able  (Ref,  2).  If  atomic-warhead-carrying  missiles  were  involved,  this  rate 
would  mean  "throwing  away"  five  percent  of  the  atoric  missile  stockpile, 
since  the  warhead  can  rarely  be  recovered  from  a  missile  which  really  "aborts" 
(Ref.  2).  Nevertheless,  let  us  use  the  figure  of  five  percent  aborts  to  see 
what  the  average  component  reliability  would  have  to  be.  If  the  missile 
were  considered  to  consist  of  five  components  (e.g.,  motor,  control  system, 
guidance  system,  fuze,  and  warhead),  the  failure  rate  of  each  would  have  to 
be  only  one  percent.  If  the  missile  were  broken  into  50  smaller  components, 
the  failure  rate  would  have  to  be  only  one-tenth  of  one  percent,  in  other 
words  the  average  component  reliability  would  have  to  be  99.9  percent!  The 
moral  to  be  drawn  from  these  complexity  arguments  is  simple;  The  failure 
rate  of  the  major  components  of  a  missile  system  must  be  at  least  an  order 
of  magnitude  smaller  than  the  failure  rate  of  the  missile  itself,  while  the 
failure  rate  of  the  many  parts  (such  as  motors,  vacuum  tubes,  valves,  etc.) 
must  be  several  orders  of  magnitude  smaller  th;an  the  failure  rate  of  the 
missile. 

(2)  Lack  of  Component  Redundancy;  The  second  difficulty  in  building  reli¬ 
able  missiles  is  the  lack  of  component  redundancy.  I'ost  of  the  components 
of  a  misFlle  system  are  in  series .  in  the  ver.se  that  any  failure  of  n  com¬ 
ponent  fail.s  the  missile.  Considering  the  components  as  links  in  t'ne  chain 
comprising  the  missile,  it  is  clear  that  the  chair  is  lltorally  no  stronger 
than  its  weakest  link:  the  system  cannot  be  mor>'  re.HalO. v  Ilian  Its  lea.st 
reliabl*"  ro-sponent.  This  Is  i-;  •  trorg  contrast  to  a  pilot'-'i  aircraft,  for 
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example,  vli-re  the  probability  of  failure  is  greatly  reduced  througli  re¬ 
dundancy  by  having  standby  co:r;ponent3  and  a  copilot,  that  is,  by  iiaving 
parallel  links  in  the  chain, 

(3)  lack  of  Feedback;  The  third  factor  is  the  lack  of  feedback  of  jood 
failure  data.  In  order  to  detect  and  cure  failures  it  is  necessary  to  de¬ 
termine  the  cause  of  failure.  This  is  not  an  easy  task  even  in  ordinary 
engineering  work  where  direct  inspection  and  instrumentation  is  possible 
during  the  operation.  In  missiles  it  is  a  far  more  difficult  problem  be¬ 
cause  the  feedback  of  infonrAtion  on  failures  occurring  during  fli^t  is 
very  inadequate,  especially  under  operatiopAl  conditions,  and  in  most  cases 
the  missile  is  not  recoverable  for  an  autopsy,  Uiis  means  that  many  test 
flights  are  necessary,  with  much  expensive  telemetering  instrumentation  to 
monitor  the  operation  of  the  components. 

(4)  Severe  Envi-ronmentst  The  fourth  factor  concerns  environmental  condi¬ 
tions,  There  is  little'  good  data  on  m.any  of  the  environmental  stresses  in 
shock  and  vibration,  temperature,  pressure,  and  hamidity  which  tl.e  missile 
must  withstand  In  transportation,  handling,  launching,  and  flight,  and  some 
of  these  stresses  are  known  to  be  very  severe.  For  example,  a  Signal  Corps 
report  re- jmnends  that  to  simulate  typical  field  handling  conditions,  elec¬ 
tronic  equipment  should  be  tested  by  dropping  it  5  fpet  onto  soil  or  con¬ 
crete,  during  which  it  will  suffer  from  200  to  5OO  g*s  acceleration  for 
several  milliseconds.  Without  good  environmental  data  it  is  difficult 
either  to  design  adequate  safety  margins  into  the  components  or  to  perform 
realistic  environmental  tests, 

(5)  Weight  and  Space  Reiuirenentnt  The  fifth  factor  involves  weight  and 
space  requirements,  which  ijr.|X)se  severe  limitations  on  the  design  and  pack- 
nging  of  components;  these  factors,  together  with  the  high  performance  re¬ 
quired  of  the  components,  result  in  small  safety  margin:',  against  failure. 
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This  is  particularly  iinportant  in  the  electronic  equipment,  where  low 
weight  factors  favor  fragile  ir-'chanical  construction  and  the  small  space 
available  makes  it  difficult  to  design  for  adequate  cooling  and  accessi¬ 
bility. 

(6J  Electronic  Reliability:  The  sixth  factor  is  electronic  reliability. 
Missile  performance  and  reliability  is  critically  dependent  on  the  elec¬ 
tronic  e'iuipment  of  the  guidance  and  control  functions.  It  is  well  known 
that  the  reliability  of  military  electronic  equipment  is  low;  for  example, 
it  is  estimated  that  only  about  one-third  of  the  Navy's  shipboard  elec¬ 
tronic  gear  is  operating  properly  (Ref.  1).  This  is  particularly  true  for 
those  missile  systems  in  which  the  major  part  of  the  guidance  equipment  is 
airborne  in  the  missile  itself.  In  general  it  appears  that  electronic  re¬ 
liability  is  the  most  important  part  of  the  missile  reliability  problem. 
Indeed,  Major  General  Putt  of  the  USAF  Research  and  Developr.ent  Command 
recently  stated  that  "the  scheduled  introduction  of  guided  missiles  into 
operational  units  depends  primarily  on  the  accuracy  and  reliability  of 
guidance  and  control  systems"  (Ref,  2), 

In  view  of  these  six  factors  it  is  abundantly  clear  that  the  problem  of 
achieving  and  maintaining  reliability  in  guided  missile  systems  is  importfin t  and 
difficult.  It  is  a  serious  challenge  to  both  the  Armed  Services  and  the  indus¬ 
try. 

The  V-2  Reliability 

A  brief  review  of  the  German  V— 2  history  will  help  to  set  the  problem  In 
historical  perspective.  The  first  experimental  work  at  Peenemunde  began  in  1V33 
with  the  A-1  rocket  weighing  150  kg,  and  was  followed  in  193/+  by  the  A-2  which 
reached  a  hei^it  of  2000  m.  As  early  as  1935  German  authorities  gave  serious 
consideration  to  the  military  applications  of  rockets.  Basic  research  had  begun 
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sevcral  years  earlier  and  much  effort  was  put  into  this  field.  As  ?.  result 
there  was  a  base  of  industrial  .'upport  for  niesile  designers.  Rocket  motors 
and  fuels  were  commercially  available  and  during  the  next  few  years  a  series 
of  high-speed  windtunnels  and  Jet  engine  test  stands  were  built,  F’*om  193^i 
to  1942  about  500  million  dollars  was  sTsent  in  developing  the  Peenemunde  Rocket 
Center;  by  1942  nearly  6OOO  people  were  employed,  about  2000  of  whom  were  scien¬ 
tists  and  engineers  (Ref.  3)*  This  program  involved  mor*=>  than  a  third  of  Ger¬ 
many's  entire  aerodynamic  research.  In  1933  first  experiments  were  made 
with  the  A-3  and  later  with  the  A-5.  These  were  small  scale  V-2's  about  25 
feet  long,  %<eighing  800  kg.  Many  of  these  A-3's  and  A-5's  were  fired  and  gave 
valuable  experience  and  technical  data. 

In  I94D  work  was  begun  on  the  V-2  and  on  July  6,  1942,  the  first  V-2  was 
fired.  It  rose  precisely  3  feet  off  the  ground  and  then  exploded  with  enormous 
violence,  destroying  the  test  station.  Numbers  2  and  3  also  exploded  but  at 
16,000  feet.  Finally,  number  4  was  a  success;  in  October  1942  it  covered  a  dis¬ 
tance  of  170  miles.  Number  5t  fired  a  short  time  later,  was  also  a  success,  but 
the  next  I3  were  failures.  Thus  out  of  the  first  eighteen  rockets  only  two  per¬ 
formed  successfully,  giving  a  reliability  of  11  percent.  During  the  three  years 
of  development,  testing,  and  training,  some  3OOO  V-2'3  were  fired.  Problem  after 
problem  arose  in  the  motor,  the  airframe,  and  the  control  system.  For  example. 

It  was  found  that  .of  the  rockets  which  were  launched  successfully,  about  half 
broke  up  in  the  air,  and  a  large  scale  theoretical  and  e.xperliriental  study  in¬ 
volving  about  300  V-2  launchings  was  required  to  solve  the  alrburst  problem, 
which  turned  out  to  be  caused  by  an  aerodynamic  deficiency.  In  all,  some  62,000 
changes  were  made  during  the  production  of  the  V-2,  which  consisted  of  about 
30,000  different  construction  and  engine  parts.  Finally,  in  September  1944,  ten 
years  after  the  first  test  rocket  firings  at  Peenemunde,  the  first  V-2  was  fired 
against  London.  By  April,  1945>  when  the  V-2  campaign  e:.iei,  about  .2700  V-2'c 
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had  br-en  fired  against  London  and  Antwerp,  with  a  reliability  of  75  or  BO  per¬ 
cent  and  an  accuracy  much  lower  than  was  called  for  in  the  military  plans  (Rei , 
5). 

After  the  war  a  number  of  V-2's  were  captured  and  taken  to  White  Sands  for 
tests  (Ref.  6).  During  the  five-year  program  68  V-2*s  were  fired,  of  which 
were  successful.  Of  the  36  failures,  23  occurred  during  launching  and  the  re¬ 
maining  13  were  evenly  divided  between  motor  and  steering  malfunctions.  Thus 
the  reliability  during  the  American  V-2  firings  was  percent  as  compared  with 
the  German  combat  reliability  of  75  percent.  This  well  Illustrates  the  diffi¬ 
culty  of  obtaining  a  high  reliability;  even  with  Germain  experience  and  techni¬ 
cal  personnel  more  than  half  the  missiles  failed  in  the  American  tests.  In  view 
of  ny  remarks  concerning  the  difficulty  of  determining  cause  of  failure  from 
flight  tests,  it  is  of  interest  to  note  that  of  the  36  V-2  failures,  in  only  6 
cases  was  the  cause  of  failure  established;  in  14  cases  it  was  known  what  failed 
but  not  why;  for  the  remaining  16  cases  only  the  general  area  of  failure  was 
known.  Thus  in  only  I/6  of  the  failures  was  the  cause  of  failure  ascertained, 
so  that  the  failed  component  could  be  immediately  improved,  .vliile  the  sample 
is  too  small  to  draw  general  conclusions,  it  indicates  the  high  price  paid  for 
failure  information  in  missile  test  flights. 

Achieving  and  Maintaining  Reliability; 

Let  us  return  to  the  problem  of  achieving  reliability.  The  objective  of 
a  missile  project  is  to  develop  a  producible  and  reliable  rrdssile.  Until  per¬ 
formance  capability  has  been  demonstrated  reliability  is  secondary  in  importance; 
when  the  required  capability  has  been  demonstrated,  however,  reliability  becomes 
of  primary  importance,  and  unless  an  adequate  combat  reliability  is  achieved  the 
missile  is  ineffective  as  a  military  weapon.  The  improvin', ont  of  syst'-m  reliabil¬ 
ity  is  therefore  a  vital  phase  of  any  weapon  developrrient. 
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The  reliability  of  a  nissile  systen  can  be  improved  in  four  fundamental 

ways: 

(1)  By  improved  componentat  The  use  of  mor-i  reliable  conponents  is  the 
usual  way  to  increase  system  reliability  and  offers  the  only  long-term 
way  of  making  large  improvements  in  reliability* 

(2)  By  improved  designt  Improved  system  and  component  design  may  in¬ 
crease  reliability  by  decreasing  complexity,  increasing  safety  margins 
against  failure,  and  improving  maintenance  and  operator  effectiveness. 

The  opportunities  for  increasing  reliability  by  improving  design  appear 
particularly  hopeful  for  electronic  equipment  in  missile  systems* 

(3)  By  improved  selection  and  training  of  personnel  and  standard  operating 
procedures!  Reliability  can  be  increased  by  improving  the  quality  and  effec¬ 
tiveness  of  the  skilled  personnel,  both  military  and  civilian,  who  are  re¬ 
quired  in  the  assembly,  inspection,  packaging,  h.andling,  testing,  mainte¬ 
nance,  and  operation  of  guided  missiles, 

{U)  By  component  redundancy:  The  use  of  standby  components  in  case  of 
failure  increases  reliability,  provided  the  svfitching  or  decision  device 
is  reliable.  The  method  may  be  costly  (in  dollars  and  weight,  for  example) 
but  may  be  Justified.  Most  important,  it  does  not  require  improved  compo¬ 
nents,  For  example,  suppose  the  guidance  system  has  a  reliability  of  75 

i 

percent,  or  a  failure  rate  of  one-fourth.  Now  replace  the  single  system  * 
by  two  of  these  guidance  systems  parallel,  so  that  if  one  fails  the 
•  other  takes  over.  For  missile  failure  to  occur  it  is  now  necessary  that 
both  guidance  systems  fail,  so  Uiat  the  failure  probability  is  I/4  times 
l/u,  or  1/16  or  6  percent.  Hence  the  reliability  in  9U  percent,  a  signi¬ 
ficant  Increase  over  the  original  75  percent. 

In  order  to  make  these  improvements  in  all  the  various  phases  of  missile 
development,  it  is  neressnry  to  obtain  technical  Informati ''n  on  falluren.  More 


P-31S' 

-12- 

Epecifically,  statistical  data  is  required  on  the  number  of  failures,  the 
identity  of  the  failed  components,  the  time  to  failure,  and  the  causes  of 
failure.  Statistical  inforeiation  of  this  type  is  costly  and  difficult  to 
obtain  from  test  flights;  the  most  hopeful  approaches  seem  to  lie  in  the  use 
of  recoverable  missiles  and  in  simulation  tests  in  vrtiich  the  missile  is  sub¬ 
jected  to  environmental  conditions  experienced  in  shipping  and  handling,  in 
launching,  and  in  flight.  Shock  and  vibration  conditions  are  important  poten¬ 
tial  sources  of  failure  in  all  phases.  In  order  to  determine  a  realistic  mix¬ 
ture  of  environmental  stresses  for  testing,  good  data  are  needed  on  the  shock 
and  vibration,  temperature,  pressure,  and  humidity  experienced  by  an  actual  mis¬ 
sile  in  traveling  from  the  factory  to  the  target.  Unless  good  environmental 
datd  are  obtained  there  ie  the  danger  that  missiles  and  their  components  vdll 
be  designed  to  survive  the  simulation  test  environments  rather  than  the  actual 
operational  environment.  In  addition,  since  there  is  always  a  variety  of  fail¬ 
ure  causes,  a  statistical  approach  is  necessary  to  insure  that  the  defects  are 
cured  systematically  in  order  of  their  importance  rather  than  in  the  order  of 
their  accidental  appearance  in  tests. 

Finally,  having  achieved  and  demonstrated  an  adequate  reliability  to  Justi¬ 
fy  service  acceptance,  the  missile  system  is  put  into  production  and  service  use, 
and  the  problem  of  maintaining  the  reliability  becomes  vital.  This  requires  a 
failure-monitoring  activity,  similar  to  quality  control.  Continuous  and  rapid 
reports  on  failures  are  needed  to  evaluate  the  reliability  and  insure  that  it 
lies  within  acceptable  limits.  Failures  in  transit,  handling,  storage,  testing, 
and  operational  use  should  bf  analyzed  to  detect  and  eliminate  sources  of  trouble. 
System  Reliability  Control,  the  Analogue  of  Component  C^allty  Control; 

How  should  all  these  technical  activities  be  efficiently  coordinated?  In 
a  simple  device  reliability  is  achieved  by  recognizing  faults  when  they  occur 
and  eliminating  them.  It>  a  complex  ^niided  ir.insili!  syste-  this  simple  approach 
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ie  correct  in  principle  but  costly  and  time-consuming  in  practice.  As  in  any 
scientific  or  engineering  project,  it  is  therefore  necessary  to  organize  and 
direct  the  technical  effort  reuuired  to  solve  the  reliability  problen-i  in  sy.t  s. 
This  organized  systems  activity  will  be  called  reliability  control;  it  is  the 
systems  analogue  to  compx>nent  quality  control,  used  to  maintain  'quality  in  manu¬ 
factured  components.  More  exactly,  by  reliability  control  I  mean  the  coordina¬ 
tion  and  direction  of  technical  reliability  activities  throuf'h  scientific  plan¬ 
ning  from  a  systems  point  of  view. 

Reliability  control  consists  of  the  following  cycle  of  five  steps; 

(1)  Determination  of  Requirements;  Reliability  requirements  must  be 
established  for  the  system  and  its  components.  From  the  definition  of 
reliability  this  demands  specification  of  the  required  performance  limits, 
the  operating  time,  and  the  environment,  as  well  as  the  recquired  reliabil¬ 
ity. 

(2)  Collection  of  Data;  Reliability  data  on  component  and  system  failures 
and  their  causes  must  be  collected  in  statistically  significant  amounts, 

(3)  Analysis;  The  data  must  be  analyzed  to  determine  whether  the  require¬ 
ments  are  met,  to  establish  the  most  important  causes  of  failure,  and  to 
recommend  methods  of  improvement, 

(4)  Improvement t  Action  must  be  taken  to  remove  the  most  important  de¬ 
fects  and  reduce  the  failure  rate  to  the  required  level. 

(5)  Surveillance;  A  continuous  and  critical  surveillance  of  the  system 
must  be  carried  out  to  insure  that  the  "improvements"  actually  reduce  the 
failures,  to  anticipate  and  examine  new  and  unsuspected  sources  of  failure, 
and  to  review  and.  modify  requirements. 

There  is  no  sharp  distinction  between  reliability  control  and  tlie  usual 
engineering  metl'.ods  of  improving  reliability.  Neverthelera  it  is  important  to 
recognise  that  reliability  control  differs  in  degree  from  conventional  engineering 
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in  three  respects;  first,  overall  system  planning  is  emp^iasiHed;  second, 
statistical  analysis  of  failure  data  is  used  as  a  control!  third,  constant 
surveillance  of  the  system  through  feedback  of  failure  data  is  required  in  all 
phases  of  development  and  productiono 

In  conclusion  I  would  like  to  emohasize  three  points: 

First,  reliability  of  the  hardware  in  a  missile  system  is  fur.damentally  the 
result  of  engineering  which  takes  into  account  realistically  and  from  a  systems 
point  of  view  all  the  significant  factors  affecting  the  performance  of  the  wea¬ 
pon. 

Second,  reliability  is  a  difficult  and  important  technical  problem  which 
re'juires  careful  plannltg,  a  large  effort,  and  great  attention  to  details. 

Third,  reliability  and  the  associated  problem  of  accuracy  are  the  primary 
factors  governing  the  time  at  which  guided  missile  systems  will  become  opera¬ 
tional,  Without  adequate  attention  to  reliability,  both  on  the  part  of  the  us¬ 
ing  Services  and  the  contractors,  these  operational  dates  will  be  delayed. 
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